Dear community, we are currently planning the implementation of SDA as a counterpart to our ACI Fabric. Right now we are asking ourselves the question where we can place the DNA Center and ISE? Would you place the appliance inside or outside the ACI ...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
We are in planning with our customer to build a giant SD Access Fabric. They have many sites scattered around the local regions. Some sites are large enough to have fabric border/ control node + Fabric Edges and some small sites will have only one to...
Hi Experts, How can we support Meraki over the top of an SD-A deployment ?When we use Meraki L3 roaming, traditionally we'll use MX concentrator, but when we use it with SDA, do we still need MX concentrator ? If not, how would the L3 roaming work...
Resolved! Fabric Border L3 Hand-off Infra_VN
Hi All, I have been reading the SDA fabric deployment guide and have a question regarding automated border L3 hand-off for the infra_VN https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/sda-fabric-deploy-2019oct.pdf As detailed in this ...
I am studying for the ENCOR exam, and I am working on SD-Access. I understand that (correct me if I'm wrong) the physical layer of the SD-Access fabric consists of the network devices. Here is the excerpt that confuses me: "Cisco access layer switche...
C9200 supports only 4 VNs as documented in the datasheet. Is this limitation applies to the whole SDA Fabric? I mean: If i am using only 9200 in my network, but i have different sites (all under one DNA Center): will i be limited to only 4 VNs across...
Resolved! SD-access switch removal
Hi,I would like to remove an Edge node switch from my Fabric but also from my inventory.I know that DNA Center is very sensitive (bugs, errors when it is not properly done). I have defined these steps :1 - In License Manager part : deregister the swi...
Resolved! On which ise node enable pxgrid ?
HelloIn a 2 nodes ise deployment where should I enable pxgrid to use with DNAC? Only on the primary PAN or on both nodes?If in both nodes does it make sense to have a single certificate for both ? Thank you
Resolved! What happens when SMART license expires
Hey,What happens when a SMART license has expired or failed to verify for 1 year?I found this community post and the answer was just "Cisco is still having issues with their licensing and are not enforcing it"I found this Cisco blog post saying "At t...
Resolved! Fusion Router between two VNs
In a scenario with two VNs. VN1 with IoT devices and VN2 with Clients. Both VNs contain multiple SGTs.I'm quite unsure about the "Best Practice" usecase regarding Fusion Routers and VNs in a Fabric. To my understanding each time I want to connect/rou...
I am having a problem trying to integrate ISE with DNAC for the first time.I am following this guide https://community.cisco.com/t5/networking-documents/how-to-cisco-dna-center-ise-integration/ta-p/3896410 and my question is regarding the shared secr...
Hi, In a four node ISE setup (two PSN, and two MnT), which of them do I connect to from DNAC for integration? Do I need to enable pxGrid on all nodes? What cert requirements are necessary on the ISE side? Thanks,daniel
Hi, Looking at Cisco SD-Access 1.3.x Hardware and Software Compatibility Matrix https://www.cisco.com/c/en/us/solutions/enterprise-networks/software-defined-access/compatibility-matrix.html Recommended ISE version for DNAC 1.3.1.5 is 2.4 patch 11 ...
Hi, SD-Access product compatibility shows 15.2(7)E1a for 3560-CX as extended node. But when we click on provided link we get access to 15.2(7)E1 (not E1a) Could you please confirm what version should be used and make appropriate corrections to the co...
Resolved! Catalyst 9600 Seed Device
Hello,Can someone confirm if 9600 is supported as seed device?
